Subprocessors
Last updated: April 15, 2026
Overview
ContractorHUB engages certain third-party service providers ("Subprocessors") to help us operate, maintain, and support the Platform. This page lists our current Subprocessors along with the purpose for which each is used and the category of data they may process on our behalf. All Subprocessors are bound by written contracts that require them to protect your data consistent with the commitments in our Privacy Policy and our standard Data Processing Agreement.
Notification of Changes
We will provide at least thirty (30) days' advance notice of material changes to this list (additions or replacements of Subprocessors that process customer personal data) by updating this page and, for enterprise customers with a signed Data Processing Agreement, by email. To receive change notifications, email privacy@contractorhub.app with the subject "Subprocessor Notifications" and we will add you to our notification list.
Current Subprocessors
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Infrastructure & Hosting | |||
| Laravel Forge / DigitalOcean | Application hosting, server management | All customer data | United States |
| Amazon Web Services (S3) | File and media storage | Uploaded files, documents, images | United States |
| Cloudflare | CDN, DDoS protection, bot mitigation (Turnstile) | IP address, request metadata | Global |
| Payments & Billing | |||
| Stripe | Payment processing, subscription billing | Name, email, billing address, payment card tokens | United States |
| Communications | |||
| Twilio | SMS/MMS messaging, voice calls | Phone numbers, message content | United States |
| Postmark / AWS SES | Transactional email delivery | Email addresses, message content | United States |
| Google (Workspace APIs) | Gmail, Calendar, Drive, Docs, Sheets integrations (customer-authorized) | Data accessed via customer-granted OAuth scopes | United States |
| AI & Machine Learning | |||
| OpenAI | AI assistant, embeddings, image analysis (roof measurements), text generation | User queries, business data sent to AI features | United States |
| Anthropic | Internal engineering diagnostics only (not customer-facing) | Internal error logs and diagnostic data | United States |
| Customer Integrations (Opt-In) | |||
| Google Ads / Google Analytics | Advertising performance reporting (customer-authorized) | Campaign metrics, ad performance data | United States |
| Meta (Facebook/Instagram) | Ad performance reporting, marketing page pixel (customer-authorized) | Campaign metrics, website visitor events | United States |
| Observability & Support | |||
| Laravel Nightwatch | Application performance monitoring, error tracking | Error traces, request metadata (no customer business data) | United States |
Right to Object
Enterprise customers with a signed Data Processing Agreement may object to the engagement of a new Subprocessor within thirty (30) days of our notice. If you have a reasonable, good-faith objection based on data protection grounds, we will work with you to resolve the objection. If we cannot do so, you may terminate the affected services without penalty for the portion of the subscription term remaining.
Contact
For questions about our Subprocessors, to subscribe to change notifications, or to exercise your right to object, contact privacy@contractorhub.app.